Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.mft
File:                     fnogtIaCHWJ702CV56Ba-fqhUpw.mft (raw, json)
Hash identifier:          5BOJKoSdqUd0spOlwyStd74iCnJfFGqzR9v3ojthFbg=
Subject key identifier:   FD:33:42:08:AF:6A:28:47:F8:CF:90:5F:AF:F8:65:2C:76:0B:35:FF
Authority key identifier: 7E:7A:20:B4:86:82:1D:62:7B:D3:60:95:E7:A0:5A:F9:FA:A1:52:9C
Certificate issuer:       /CN=7e7a20b486821d627bd36095e7a05af9faa1529c
Certificate serial:       019A72CA6CA7580D21BF020D91D0A594166E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fnogtIaCHWJ702CV56Ba-fqhUpw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.mft
Manifest number:          07CC
Signing time:             Tue 11 Nov 2025 12:00:59 +0000
Manifest this update:     Tue 11 Nov 2025 12:00:59 +0000
Manifest next update:     Wed 12 Nov 2025 12:00:59 +0000
Files and hashes:         1: fnogtIaCHWJ702CV56Ba-fqhUpw.crl (hash: vCVAVHTup8QbHSMSasUrFcZzyiZ+wTmJfNq/BPuQ9c0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fnogtIaCHWJ702CV56Ba-fqhUpw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 09:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:72:ca:6c:a7:58:0d:21:bf:02:0d:91:d0:a5:94:16:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e7a20b486821d627bd36095e7a05af9faa1529c
        Validity
            Not Before: Nov 11 12:00:59 2025 GMT
            Not After : Nov 12 12:00:59 2025 GMT
        Subject: CN=fd334208af6a2847f8cf905faff8652c760b35ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:19:19:ca:1f:1d:db:5f:d2:d9:4c:8d:91:dd:
                    62:7b:6c:6d:32:67:54:dd:9a:18:fd:c7:04:40:96:
                    bf:30:61:ce:8e:13:a7:48:24:66:f3:c9:fa:3a:61:
                    e9:0b:46:bc:73:61:4a:98:cd:75:64:48:05:85:62:
                    49:a1:1e:52:9f:6a:99:da:7c:5a:1c:48:89:39:86:
                    d0:63:79:b1:1d:e8:d1:c0:b3:71:b5:00:28:aa:38:
                    67:83:41:28:c0:56:dd:3f:fa:25:04:99:40:31:45:
                    da:31:2c:d1:a7:69:0b:38:b5:80:6e:c2:9b:b1:26:
                    d9:ac:42:6b:74:31:63:5f:eb:18:5d:ec:61:18:07:
                    f2:39:54:ca:6a:d4:bd:75:de:c3:a3:84:0b:e7:be:
                    2f:30:1a:8a:53:13:80:16:e9:01:6a:32:fe:37:ee:
                    ea:94:5a:7f:e9:9f:22:83:81:fc:ad:8b:90:ea:af:
                    7f:92:7f:83:ac:c9:83:bb:05:bb:b8:12:ba:c2:57:
                    84:c3:d8:54:79:cf:f0:eb:ec:21:7b:4c:6a:47:7d:
                    2a:25:5d:37:7d:a2:b9:ea:7b:dc:6f:61:72:50:36:
                    ef:ea:43:9c:58:13:30:ed:50:8d:73:67:b8:da:b3:
                    2c:73:d3:70:05:5b:a1:20:2d:a4:2b:90:20:36:c3:
                    b6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:33:42:08:AF:6A:28:47:F8:CF:90:5F:AF:F8:65:2C:76:0B:35:FF
            X509v3 Authority Key Identifier:
                keyid:7E:7A:20:B4:86:82:1D:62:7B:D3:60:95:E7:A0:5A:F9:FA:A1:52:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fnogtIaCHWJ702CV56Ba-fqhUpw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:9d:31:e2:dc:f1:f2:c2:92:d4:15:35:96:e7:d7:d1:f5:6c:
         1c:32:02:0b:41:c9:a8:37:30:d4:3d:cd:04:3d:80:6e:90:d9:
         b8:6c:6e:33:cf:42:f5:a9:59:c9:e4:8d:89:43:10:00:d0:9b:
         90:53:cf:b9:c7:98:48:86:b7:fa:1d:a4:24:6d:0d:97:33:dd:
         1e:9d:9b:95:40:46:c2:11:f1:c7:07:a2:cf:38:6f:51:43:0d:
         26:12:c8:4d:f2:51:16:db:78:16:6f:6b:4d:41:ab:6c:34:95:
         a2:38:e6:0c:49:75:14:1c:7a:7c:e7:52:74:ae:ec:3d:d3:4c:
         b9:26:df:19:5a:16:f6:57:95:08:ef:d1:63:b2:05:f4:e4:cb:
         30:2a:63:d2:9e:af:62:b1:8f:98:3c:c5:12:3d:91:7e:b6:a5:
         cf:d8:69:3b:9b:5f:68:4e:05:95:60:b0:a8:7a:2b:a4:01:fd:
         29:ee:20:0e:0d:56:c9:ea:5e:a5:a4:14:f1:af:91:bf:6c:72:
         66:79:46:b4:bf:cd:5b:69:52:bf:99:c4:17:f6:59:bf:dc:27:
         af:2f:af:05:3c:16:8d:15:99:85:66:4b:bd:e9:61:d3:de:37:
         80:2d:5c:74:3e:ac:e3:56:d8:40:19:5a:0e:5b:16:6c:8c:62:
         86:1e:0c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:55:20 2025 by rpki-client